Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
File: SOmaP-7GTWutCY0bLfC1NqA4jqM.mft (raw, json)
Hash identifier: dYd1L+BBxpEPNdR+CS6hFY8oB8Tl/WfkhCfg451FWQs=
Subject key identifier: 78:E9:52:93:89:03:37:D9:51:84:B6:45:C9:34:76:C7:1E:36:EB:A3
Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
Certificate issuer: /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Certificate serial: 0196BE5C81500EBB29798F8EC589BB7006D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 08:00:55 +0000
Manifest this update: Sun 11 May 2025 08:00:55 +0000
Manifest next update: Mon 12 May 2025 08:00:55 +0000
Files and hashes: 1: JqTAJDe2OYCUvbJc8miiDJhn9ck.roa (hash: XOVcEkw4qLtgeZZ1W3TII3S4x02laIR1b6T9nld7824=)
2: SOmaP-7GTWutCY0bLfC1NqA4jqM.crl (hash: oLLS/VZwXb4OufXNwb2O/EWoOBkEmNdCUwl9NY+zZuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:81:50:0e:bb:29:79:8f:8e:c5:89:bb:70:06:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Validity
Not Before: May 11 08:00:55 2025 GMT
Not After : May 12 08:00:55 2025 GMT
Subject: CN=78e95293890337d95184b645c93476c71e36eba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:5b:ad:92:67:7f:03:58:96:f4:f8:46:e2:
bb:74:08:2d:f8:60:6e:4c:b8:ae:36:a0:25:c1:0a:
e5:d1:c8:50:53:13:1b:91:d0:a0:ea:e4:88:f7:c4:
bc:32:be:52:d4:80:c7:0c:5a:a1:65:25:07:32:32:
1b:cf:57:e3:fc:d4:96:b0:67:e1:3f:55:c3:d9:79:
1a:ac:ad:6d:e7:cb:04:3e:78:04:05:aa:e7:d2:69:
94:2e:3c:7f:d0:54:83:c8:4c:5f:79:10:49:40:97:
cd:98:24:3b:04:85:d4:05:8e:9e:73:4d:6f:03:f2:
2e:1d:c0:88:9c:c7:cf:d4:cb:67:6a:19:07:00:bc:
68:37:05:af:34:26:58:72:00:65:8e:73:19:80:8f:
06:a5:e7:f1:05:61:85:fa:83:65:9e:42:76:cd:98:
db:a0:5f:20:f0:c6:ed:c0:62:8f:3a:7d:d4:9b:52:
1a:32:0e:e7:ae:49:80:f1:cf:5d:96:60:d5:82:c7:
57:b4:5f:11:9b:b5:a8:63:c0:42:96:6d:82:7c:b8:
d8:c6:99:d0:50:79:70:89:95:7f:d5:8b:4a:87:25:
d9:ac:25:cb:e9:00:6b:8b:86:21:15:f2:2b:ea:cb:
75:75:54:fb:4e:fe:6e:c8:fa:fb:75:02:86:45:f4:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E9:52:93:89:03:37:D9:51:84:B6:45:C9:34:76:C7:1E:36:EB:A3
X509v3 Authority Key Identifier:
keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:31:8e:a0:94:52:0d:54:e0:06:e4:08:f6:36:95:4c:ac:ed:
79:77:b1:c0:70:f9:32:7d:12:71:c3:60:52:f6:c6:2d:8a:9a:
bc:dc:00:f8:a8:b4:fc:bb:3d:ed:c1:a8:d2:4f:af:d8:ff:d0:
0c:33:07:2a:e2:92:f5:4a:46:ba:4c:15:5e:6d:f2:9f:7e:36:
a9:d1:95:34:44:af:a9:8a:6e:be:04:5c:73:a9:46:28:21:59:
0b:f1:b7:dd:04:11:6a:56:2b:29:e8:e9:d3:50:c7:22:4b:5f:
94:ed:42:63:6f:8c:2f:6d:44:83:a6:9d:b2:9a:d1:10:aa:95:
73:f2:4d:f5:8c:f9:8c:87:05:23:5d:ae:39:1a:5d:c4:6e:be:
cd:63:67:75:ae:00:ab:03:20:09:ef:a3:9c:6e:66:68:dc:b2:
d7:de:f7:83:f9:bb:86:be:56:ce:40:13:23:9c:94:86:d6:9f:
e5:32:82:24:c3:3d:f5:44:a9:c4:ad:1d:5d:c7:44:58:24:c9:
e6:30:1c:6e:12:3f:7d:4d:66:52:b2:8a:d6:2a:93:30:b8:5a:
e4:cc:e5:6a:2f:30:59:f3:1d:c7:37:20:c6:28:40:46:7c:79:
7f:6c:3f:dd:99:2d:57:a9:e5:9f:62:13:0a:18:d5:d7:83:5a:
f2:bd:93:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XIFQDrspeY+OxYm7cAbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZTk5YTNmZWVjNjRkNmJhZDA5OGQxYjJkZjBiNTM2YTAz
ODhlYTMwHhcNMjUwNTExMDgwMDU1WhcNMjUwNTEyMDgwMDU1WjAzMTEwLwYDVQQD
Eyg3OGU5NTI5Mzg5MDMzN2Q5NTE4NGI2NDVjOTM0NzZjNzFlMzZlYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEpbrZJnfwNYlvT4RuK7dAgt+GBu
TLiuNqAlwQrl0chQUxMbkdCg6uSI98S8Mr5S1IDHDFqhZSUHMjIbz1fj/NSWsGfh
P1XD2XkarK1t58sEPngEBarn0mmULjx/0FSDyExfeRBJQJfNmCQ7BIXUBY6ec01v
A/IuHcCInMfP1MtnahkHALxoNwWvNCZYcgBljnMZgI8GpefxBWGF+oNlnkJ2zZjb
oF8g8MbtwGKPOn3Um1IaMg7nrkmA8c9dlmDVgsdXtF8Rm7WoY8BClm2CfLjYxpnQ
UHlwiZV/1YtKhyXZrCXL6QBri4YhFfIr6st1dVT7Tv5uyPr7dQKGRfSQfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjpUpOJAzfZUYS2Rck0dsceNuujMB8GA1UdIwQY
MBaAFEjpmj/uxk1rrQmNGy3wtTagOI6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU09tYVAtN0dUV3V0Q1kwYkxmQzFOcUE0anFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNGE4MTctMjRhNi00YWMwLTkzMzYt
N2Q3ODE0YzdhNWY3LzEvU09tYVAtN0dUV3V0Q1kwYkxmQzFOcUE0anFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yNGE4MTctMjRhNi00YWMwLTkzMzYtN2Q3ODE0YzdhNWY3
LzEvU09tYVAtN0dUV3V0Q1kwYkxmQzFOcUE0anFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTGOoJRS
DVTgBuQI9jaVTKzteXexwHD5Mn0SccNgUvbGLYqavNwA+Ki0/Ls97cGo0k+v2P/Q
DDMHKuKS9UpGukwVXm3yn342qdGVNESvqYpuvgRcc6lGKCFZC/G33QQRalYrKejp
01DHIktflO1CY2+ML21Eg6adsprREKqVc/JN9Yz5jIcFI12uORpdxG6+zWNnda4A
qwMgCe+jnG5maNyy1973g/m7hr5WzkATI5yUhtaf5TKCJMM99USpxK0dXcdEWCTJ
5jAcbhI/fU1mUrKK1iqTMLha5Mzlai8wWfMdxzcgxihARnx5f2w/3ZktV6nln2IT
ChjV14Na8r2TsQ==
-----END CERTIFICATE-----
Generated at Sun May 11 14:46:25 2025 by rpki-client